Skip to content
Open app

Privacy Policy

Local preview update: 13 October 2026 · Account policy: 31 August 2026

Current release: Maker Caper is a no-account, local-only preview. Accounts, child profiles, cloud saves, public sharing, payments and application email flows are unavailable. Projects and learning progress stay in this browser and are not uploaded to a Maker Caper account. Anyone using the browser can see that work. Choose Local preview in the app header to clear device work; clearing browser data also removes it. Local saves do not sync between devices and are not automatically uploaded if account features return later.

Cloudflare still processes IP addresses and technical requests to deliver and secure the website. The account-related sections below describe the separately gated account service, not enabled collection in this local preview. The preview does not certify compliance or replace the independent privacy and provider review.

The short version: a grown-up owns the account, receives a direct privacy notice, verifies their email, and gives separate parental consent before Maker Caper enables child profiles or cloud child activity. Maker Caper has no advertising or third-party advertising trackers. Public, external-link, and family sharing are disabled, and we do not send child-specific progress emails.

Who we are and who uses Maker Caper

Maker Caper is a creative coding game operated by 9626956 Canada Inc. Children use profiles within an account created and managed by a parent or legal guardian (the “grown-up”). They can solve programming challenges and make code, music, sounds, effects, characters, levels, and games. This policy explains our online information practices for both the grown-up and the children who use those profiles.

Before a child profile is enabled

Creating a grown-up account does not itself give permission to collect child profile or activity information. We email the account holder a direct privacy notice and verification link. After verifying control of that email address, the grown-up must review the current notice and separately confirm that they are the parent or legal guardian and consent to the stated child-information practices. We then send a confirmation email. The application checks that current consent at the server before permitting child-data reads or writes.

Before that process is complete, we keep the grown-up account and security information needed to deliver the notice, verify the mailbox, protect the account, and record the decision. If consent is not completed, daily maintenance removes an eligible unconsented account and its D1 session and verification records 14 days after account creation. A no-account trial puzzle does not save a gameplay event to our database. Cloudflare still necessarily handles an IP address and request information to deliver and secure the site; the provider-retention launch gate is described below.

Information we collect

How we use information

Internal-only launch and information sharing

Maker Caper launches in an internal-use-only mode. A child cannot publish a profile or project, generate or open an external project link, or share a saved game with another profile in the family account. We do not send emails containing a child nickname, activity, progress, badges, project titles, or project contents. A project file downloaded to the family’s own device stays under that family’s control.

We do not sell personal information, use it for behavioural advertising, allow third-party advertising trackers, or send child information to data brokers. We do not use child information to contact a child or build an advertising or behavioural profile. If we ever propose a material new use or a disclosure feature, we will update our notices and obtain new or separate parental consent where required before enabling it.

Service providers

The application is configured to send each provider only the information needed for its role. Before a provider may receive child information, our production release process requires a documented capability review, written security assurances, purpose restrictions, and verified retention settings. Those child-data approvals are not yet complete, so the production child-data gate remains closed. The services used for adult and pre-launch operation, and proposed for the child-data launch, are:

Maker Caper is operated from Canada, and providers may process information in the United States and other countries. Under Canadian privacy law, we remain accountable for information handled for us. Where EU or UK law applies, we use an available transfer safeguard only after confirming that it applies to the relevant provider and service.

Technical identifiers and internal operations

An IP address and similar persistent identifier can be personal information under US children’s privacy rules. Before consent, we permit only the minimum identifier handling needed for network delivery, security, authentication, rate limiting, debugging, and legal compliance. We keep product-event collection off for the no-account trial, do not attach guest activity or creative content to those identifiers, do not use them to contact anyone or serve behavioural advertising, and do not build a child profile from them. The production child-data gate stays closed until provider terms, access, and retention are verified for those operational purposes. Application rate-limit rows follow the period below.

Retention and deletion schedule

The application-enforced periods and the still-open provider or deployment launch gates are distinguished below. A verified parent deletion request starts live D1 deletion without waiting for an inactivity or withdrawal period, unless a narrow legal obligation requires a specific parent-only record.

Grown-up controls and parental rights

The verified account holder can:

We verify that a requester controls the grown-up account before disclosing or deleting child information, using a current session, password re-check, or another proportionate method. The Account page provides the current self-service download and deletion controls. There is no self-service profile editor, so a correction starts as a verified manual request. Withdrawal immediately stops ordinary child-data processing. Parent review, download, and deletion remain available during the 30-day frozen period. Depending on where you live, you may also have rights to access, correct, delete, port, restrict, or object to processing and to appeal a denied request.

Security

We use password hashing, secure session cookies, rate limiting, access controls, encryption in transit, restrictive browser policies, and server-side account ownership and consent checks. Before child-information collection is enabled, our release process also requires provider and deletion checks and an approved written information-security program with regular testing and at least annual risk assessment and review. No system can promise absolute security, but we design the service to limit both the information held and who can access it.

Children’s privacy and COPPA

Maker Caper is designed for children, including children under 13. The US Children’s Online Privacy Protection Rule informs the direct notice, parental-consent flow, data minimization, parent controls, provider restrictions, security program, and retention schedule described here. We do not claim that the FTC has certified or approved Maker Caper, and we are not currently a member of an FTC-approved COPPA Safe Harbor program.

Research-informed educational design

Research on creative learning, formative feedback, and programming education informs how Maker Caper asks learners to predict, run, debug, remix, and make across visual blocks, structured code, typed code, music, and game creation. This describes our design method. We have not conducted our own efficacy study, do not claim clinical validation or educational certification, and do not guarantee a particular learning outcome. See the selected sources on our research and design page.

Policy changes

We update the date above when this policy changes. If a change materially affects how child information is collected, used, or disclosed, we will send a new direct notice and obtain new or separate parental consent where required before applying that change to child data.

Contact and operator

Maker Caper is operated by 9626956 Canada Inc., 100 Challenger Ave, Ayr, ON N0B 1E0, Canada, phone 647-713-0504. Adult privacy questions and requests can be sent to privacy@makercaper.com. Account help can be sent to accounts@makercaper.com. Write from the adult account email and do not include a child’s name, nickname, project, progress, or other child information. Ask us to start a verified request instead. See our adult contact page for the complete email-routing explanation.